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The invention relates to a semiconductor device comprising a substrate with a 
first side, at which first side a plurality of transistors and interconnects is present, which are 
covered by a protective security covering, which device is further provided with bond pad 
regions. 

5 The invention also relates to a carrier comprising a semiconductor device. 

The invention further relates to a method of manufacturing a semiconductor 
device provided with a substrate with a first side, comprising the steps of: 
- providing a structure of transistors and interconnects at the first side of the substrate, the 
structure including bond pad regions; 
10 - applying a protective security covering; and 

• - patterning the protective security covering from the first side m «; ■ expose the bond pad 
regions. 

Security issues are becoming increasingly important aspects in semiconductor 
15 design and deployment particularly as the amount and range of potentially sensitive 
commercial and/or personal information mat can be stored by, and transferred between 
electronic devices increases. Smart cards comprise one such form of electronic device in 
which it is essential to attempt to protect against invasive procedures such as attempted 
tampering with the integrity of the integrated circuit device, and procedures involving reverse 
20 engineering and exposure to radiation. 

Security coatings for integrated circuit devices have been used in an attempt to 
improve the physical integrity of, for example, integrated circuit devices found on smart 
cards, by seeking to restrict the manner in which information held by the integrated circuit 
device can be accessed or modified. 
25 One such level of protection designed by Schlumberger is referred to as 

Sishell. The process steps adopted by Schlumberger in the provision of its Sishell protection 
process requires the processing of the active devices, i.e. the integrated circuits within the 
smart card, to completion in a manner such that a passivation layer is located as required and 
the required bond pads are opened through the passivation layer. A layer of bare silicon is 



^ Jd^Gi,!^) ^ j ! 0^07611: 

2 20.03.2002 
then glued over the upper surface of the integrated circuit and the silicon layer is provided 
with apertures, which are located so as to correspond with the locations where the bond pad 
openings within the integrated circuit are found. The stack comprising the integrated circuit, 
glue layer and silicon layer is then thinned by processing of the undersurface of the silicon 
5 substrate of the integrated circuit so as to achieve a required total thickness. In this manner, 
the integrated circuit side of the stack also becomes very sensitive and prone to damage and 
breakage if an attempt is made to lift off the silicon layer from above the passivation layer by 
mechanical means. However, insofar as the protective silicon cover layer is etched and 
patterned with regard, in particular, to the bond pad openings, such layer is 

10 disadvantageous^ prone to becoming etched and removed and this limits its integrity of 

security. Also the sensitivity to breakage of the integrated circuit can readily be overcome by 
fixing the integrated circuit to, for example, a sapphire substrate. Also, the stack structure 
formed is not sufficiently dense so as to prevent damage through infrared radiation and, 
somewhat further disadvantageous^, silicon generally exhibits a transparency to infrared 

15 radiation, so that the underlying structures can then be observed* 

Known process of thi s ? w . ^ therefore disadvantageous in that the ^ 
semiconductor device formed is p;:^- ^;:v-A\l .v^xurity coating that only enhances the 
security of the device to a disadvantage ^ ! /raited degree. 

20 It is therefore a first object of the invention to provide a semiconductor device 

of the type mentioned in the opening paragraph which has a substantially enhanced security. 

It is a second object to provide a carrier with the semiconductor device of the 

invention. 

It is a third object of the invention to provide a method of manufacturing a 
25 semiconductor device of the kind mentioned in the opening paragraph, which exhibits an 
advantage over known such methods. 



The first object is realized in that the protective security covering comprises a 
substantially non-transparent and substantially chemically inert security coating, and that the 
30 bond pad regions are accessible from the second side of the substrate. 

As there is no need in the device of the invention to etch or pattern the 
protective security covering for bond pad access, it is possible to employ one, or a 
combination of, near chemically inert material layers in the security covering. Therewith it 
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becomes almost impossible to polish the security covering, which greatly enhances the 
protection offered 

Although it might appear at first sight that the semiconductor device of the 
invention is at its second side open to probing and to deteot any structures, this is not true or 
me problem can be solved. First of all, the bond pads can be protected by antiprobing means. 
This is not different from the prior art situation. Such andprobing means can be of a software 
nature a hardware nature or a combined hardware/sof tware nature. For example, »t can be 
bribed mat a 4g* should have a specific patten and alternative* is direcdy connected 
to a ground plane. 

The bond pad regions can be accessible to the second side of the substrate m 
various manners. It is preferably that the substrate is dunned and locally etched. This option 
is very suitable for silicon substrates. After the etching of the substrate bumps can be 
provided at the bond pad regions. Alternatively, the etched windows can be filled with metal, 

for example by electroplating, 
i ' In the preferred case that the substrate is a silicon substrate, the substrate with 

its dense - m ■ , f -^sisters offers a security in itself. The packing is here at its most dense 
in vie- .i n~ ■■„ preferably field-effect transistors, and contact plugs found therein. 

Any attempt w such structures will immediately result in damage to the junctions and 
«, any thin gate oxides such that the integrated circuit device will not then function. In 
0 addition, it is almost impossible in practice to successfully probe sub-half -micron devices- 
Besides, in order to modify the pattern and dam implemented in a semiconductor devtee.lt 
are no. only the individual transistors and other semiconductor elements mat are vulnerable 
to attack, bu, also tire circuit as implemented in the interconnect pattern. The dens, padong 
of transistors effectively shields this circuit from the second side. 
25 Nevertheless, a security layer can be provided at the second side of the 

substrate, which security layer leaves exposed the bond pad regions or any metallisation for 
access thereto. This option can be used with silicon or outer semiconductor substrate*. It is 
however in particular preferred in the case mat the transistors are of the thin-film type that are 
present on an Insulating substrate. Such a structure will have die advantage of flexibility, and 
30 is therefore very suitable for integration in flexible carrier,, such as banknotes, other security 
papers, labels and tags. Further on, in the case of an insulating substrate with 
transistors, the insulating substrate can be or contain a security layer or could be replaced by 
a security layer after processing if so desired. 
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In general, the protective security covering will contain a passivation layer to 
protect the underlying structure from any disadvantageous or contaminating influences of the 
security coating. It is further on preferred that an adhesion layer is present between the 
passivation layer and the security coating. A preferred example of such passivation layer is a 

5 layer of Ti02, which is chemically inert, closed and non-porous. 

The security coating can contain a layer with a matrix of 
aluminummetaphosphate. Such a layer that is generally filled with particles such as TiN and 
Ti02 has as advantages of being chemically inert, non-transparent to radiation, relatively 
hard a nd brittle, and difficult tn polish. It is prafetahlv-mado f rom a - p reettrsorittgterial, such 

10 as A1(H2P03), or monoaluminumphosphate. This material is converted to 
aluminummetaphosphate in an anneal. 

Alternatively or in addition thereto, the security coating is formed of multiple 
alternate layers, which alternate layers are sensitive to different etchants. Particularly 
preferred is a combination of alternate W and Al containing layers. The combination of such 

1 5 metals such as those defined proves to be particularly difficult to etch and polish, particularly 
by chemical mechanical means. This arises since Al does not etch in W etchants and vice 
versa. Also, when considering polishing such a structure, it will be necessary to change from 
one polishing pad to another every time each of the different layers is expected at the surface 
otherwise integration of the respective polishing pads is likely to become compromised and 

20 the pad damaged. However it should be appreciated that the basis of such a layer structure is 
W and Oxen any metal that adheres to W and does not etch in H202/NH4OH or fluorine- 
containing plasma. The use of Al containing layers is particularly advantageous in allowing 
for ready handling and processing of the semiconductor device in an efficient manner. 

In general, it will be understood that the security is most enhanced therewith 

25 that the security coating is unpatterned. However, there may be applications in which it is 
preferred to have patterning at both the first and the second side. Such an application arises 
for example with devices, that are capacitively coupled to an antenna structure that is present 
in the carrier, which is disclosed in the non-prepublished application with number 
EP00203298.5. In this case the capacitor electrodes can be provided on the first side and on 

30 the second side of the integrated circuit, whereas there is nevertheless an adequate security 
protection through the security coatings. A suitable security coating that can be patterned, is 
for example based on a matrix of monoaluminumphosphate. Patterning thereof may be done 
with a lift-off process. 
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The second object of a carrier with improved security is achieved in that the 
carrier comprises the semiconductor device of the invention. The carrier can be a smartcard, 
but may further be a tag, a label, a security paper including a banknote, or even a record 
carrier such as an optical disc. As stated above, the record carrier may contain an antenna 
5 structure that is capacitively or with contact coupled to the semiconductor device. 

The third object of an improved method of manufacturing a semiconductor 
device provided with a substrate with a first and second side is realized in that it comprises 
the steps of: 

10 - providing a structure of transistors and interconnects at the first side of the substrate, the 
structure including bond pad regions that are defined at an interface with the substrate; 

- applying a protective security covering including at least a substantially non-transparent 
and substantially chemically inert security coating; 

- patterning the substrate from the second side so as to expose the bond pad regions. 
15 Processing the semiconductor device structure in this manner proves 

particularly advantageous in that, since the silicon substrate is effect: v j *u :;i from 5 ^ 
underneath, there is no need to etch or pattern the protective coaf:% > ?x O' ^ ,v ci access and 
so it then proves possible to employ one, or a combination of, near c&^&$$^eA. materials 
layers for the security coatings, for bond pad access, since they do not subsequently have to 
20 be patterned. Such a requirement for patterning in the prior-art is disadvantageous. 

Preferably, the substrate is a silicon substrate that is first thinned, for example 
by grinding or chemical-mechanical polishing and then locally etched. Etching means include 
KOH. 

In a most preferred embodiment, a second substrate is provided on the 
25 protective security covering and attached to it by means of glue. Such a technique is also 
known as substrate transfer, and is per se known, for example of US-A 5,689,138. The 
second substrate may contain any material, and is preferably providing mechanical support 
for the structure. Suitable materials include glass, aluminumoxide, silicon, epoxy, and the 
like. Preferably the glue layer has a thickness of some micrometers wherewith any 
30 unequalness in the surface of the protective security covering is overcome. Alternatively, an 
additional planarizing layer may be provided on top of the security covering. 



The invention is described further hereinafter, by way of example only, with 
reference to the accompanying drawings in which Figs. 1-8 comprise cross-sectional 
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illustrations of the formation of a semiconductor device with a protective security covering 
formed thereon. Same reference numbers refer to like elements in the drawings. The 
drawings are diagrammatic and not on scale. 

5 Turning now to the drawings, Fig. 1 illustrate an initial silicon substrate 10 
with a first side 1 and a second side 2. The substrate 10 comprises a completed integrated 
circuit wafer structure including a passivation layer 12 in which projected bond pad regions 
14, For reasons of clarity any interconnect layers that are present on the substrate 10 have 
been omitted in the drawings. It is however to be understood, that the bond pad regions 14 

10 are present at the interface with the silicon substrate 10, or such that they can be exposed 
from the second side 2 of the substrate 10. This is contarily to the location of the bond pad 
regions in the prior art, wherein they were present in the top of the interconnect structure, and 
before being exposed, only being covered by the passivation layer 12. As will be understood 
by any skilled person, the bond pad regions are such defined, that there is no overlap with the 

15 transistors on perpendicular projection of the bond pad regions on the substrate. 

In accordance with one partic ■:< ^ ^ of the present invention, a plurality of 
security coatings 16 is deposited upon tb^^;^H# * t U^*er 12, the process of the present 
invention being such that there is no need to&# ">M pattern the security coatings 16 and 
there is no need at this stage for the bond pad regions 14 to be opened. The passivation layer 

20 12 may be omitted, but is preferably present. The plurality of security coatings forms the 
protective security covering. 

With regard to Fig. 2, the security coatings 16 in the illustrated example 
comprises aTi02 layer 18, a coating layer 20 based on monoAluminivunPhosphate (MAP) 
filled with particles of Ti02 and/or TiN, and subsequently a multi alternating layer structure 

25 22 formed of Al and W layers respectively. 

Subsequent to the coating of the substrate passivation layer structure as 
illustrated in Fig. 2, a substrate 24, which can be in the form of a silicon wafer substrate or a 
glass substrate such as AF45 is attached by means of a layer of glue 26 to the upper surface 
of the protective coatings 16, and as shown in Fig. 3. 

30 As illustrated in Figs. 3 and 4, and by means of a substrate transfer process, 

the structure is then manipulated and processed in a manner so as to thin the silicon substrate 
10 by action against the underside thereof. 
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The underside of the structure illustrated in Fig. 4 is then manipulated and 
processed by means of, for example, a KOH etch at the regions 28 where the bond pads 14 
are projected so as to arrive at the structure as illustrated in Fig. 5. 

Figs. 6 illustrates the structure of Fig. 5 once inverted and the portion 7 
5 illustrated in Fig. 6 is shown in greater detail in Fig. 7 which serves to illustrate a nitride layer 
30 provided above the bond pad opening and also part of the semiconductor circuitry 32 
provided under the thinned silicon substrate 10 which in accordance with the illustration of 
Fig. 7 is now oriented above the structure. 

A selective etch is then conducted so as to arrive at the structure as illustrated 
10 in Fig. 8 which allows for subsequent testing and packaging of the integrated circuit device as 
required. 

As will be appreciated particularly from Figs. 6-8, the employment of a 
substrate transfer technique in accordance with this illustrated embodiment of the present 
invention proves particularly advantageous in that it allows for the ready processing of the 
15 structure in an manner so as to allow for the provision of security coatings formed of 

substantially kasA ^^rljnls.' Also in providing for openings to the bond pad regions through 
the thinned wj&&*Mm*db*tm, an appropriate degree of protection due to the density Of 
device stractures^^sbd therein is provided and which serves to prevent access to the 
underside of the structure without fatal damage to the device. 
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CLAIMS: 

2103.2002 
® 

1- A semiconductor device comprising a substrate with a first and an opposed 

second side, at which first side a plurality of transistors and interconnects is present, which 
are covered by a protective security covering, which device is further provided with bond pad 
regions, characterized in that the protective security covering comprises a substantially non- 
5 transparent and substantially chemically inert security coating, and 

the bond pad regions are accessible from the second side of the substrate. 

2. A semiconductor device as claimed in Claim 1, characterized in that 

- the bond pad regions are present on the first side of the substrate, and 
10 - the substrate is a silicon substrate, that is patterned as required for access to the bond pad 
regions, 

3- A semiconductor device as claimed in Claim 1 or 2, charac;.: B.\i, 

security layer is present at the second side of the substrate, which security layer leaves 
15 exposed the bond pad regions or any metallisation for access thereto. 

4. A semiconductor device as claimed in Claim 1, characterized in that the bond 

pad regions protected against probing with antiprobe means. 

20 5. A semiconductor device as claimed in Claim 1 , characterized in that the 

security coating comprises a layer of Ti02. 

6. A semiconductor device as claimed in Claim 1, characterized in that the 
security coating is formed of multiple alternate layers, which alternate layers are sensitive to 

25 different etchants. 

7. A carrier comprising a semiconductor device according to Claim 1. 
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8. A method of manufacturing a semiconductor device provided with a substrate 

with a first and second side, comprising the steps of: 

- providing a structure of transistors and interconnects at the first side of the substrate, the 
structure including bond pad regions that are defined at an interface with the substrate; 

5 - applying a protective security covering including at least a substantially non-transparent 
and substantially chemically inert security coating; 

- patterning the substrate from the second side so as to expose the bond pad regions. 

9 A method according to Claim 8, wherein the substrate is a semiconductor 

10 substrate that is thinned and etched to expose the bond pad regions. 

10. A method according to Claim 8 or 9, wherein a second substrate is provided 

on the protective security covering and attached to it by means of glue. 
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The semiconductor device comprises a substrate (10) with a first (1) and an 
opposed second side (2), at which first side a plurality of transistors and interconnects is 
present, which are covered by a protective security covering (16), which device is further 
provided with bond pad regions (14). The protective security covering (16) comprises a 
5 substantially non-transparent and substantially chemically inert security coating (16), and the 
bond pad regions (14) are accessible from the second side of the substrate (10). The 
semiconductor device can be suitable made with a substrate transfer technique, in which a 
second substrate (24) is provided at the protective security covering (16). 

10 Fig. 6 
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